Truncate the account information on electronically printed credit and debit card receipts you give your customers. You may include no more than the last five digits of the card number, and you must delete the card’s expiration date.

Develop a written records retention policy, especially if you must keep information for business reasons or to comply with the law.